What is GHSA-jf8q-5hx8-3j27?

GHSA-jf8q-5hx8-3j27 is a security advisory published by GitHub Security Advisories with High severity. In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without...

Which CVE IDs does GHSA-jf8q-5hx8-3j27 cover?

GHSA-jf8q-5hx8-3j27 covers the following CVE IDs: CVE-2025-20701. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jf8q-5hx8-3j27?

GHSA-jf8q-5hx8-3j27 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-jf8q-5hx8-3j27HighCVSS 8.8

In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without...

Vendor

GitHub Security Advisories

Published

August 4, 2025

Last Modified

June 21, 2026

🔗 CVE IDs covered (1)

CVE-2025-20701 →

📋 Description

In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-20701
https://www.airoha.com/product-security-bulletin/2025
http://seclists.org/fulldisclosure/2026/Jun/18
https://github.com/advisories/GHSA-jf8q-5hx8-3j27